IT SOX & Controls Analyst – Audit-Ready SAP GRC

Biopharma Careers; Chadds Ford Township (PA); On-site; USD 85,000 - 120,000; Full time

Job summary

Incyte Corporation seeks an IT Internal Controls Analyst to support IT SOX compliance and ITGCs across enterprise systems. You will partner with IT, IT Application Security, and Audit teams to manage control activities, access reviews, and audit evidence in a regulated environment.

The role requires hands-on SOX experience, SAP/GRC familiarity, strong documentation, and ability to collaborate with US and EU stakeholders.

Qualifications

• Bachelor’s degree in information technology/computer science or related field.
• 1–3 years of hands‑on IT SOX/ITGCs or technology risk/compliance experience.
• Strong understanding of user access controls, identity lifecycle management, and segregation of duties.
• Experience supporting SDLC controls for IT projects.
• Hands‑on experience with ERP environments (SAP preferred) including access/changes controls.
• Working knowledge of GRC platforms such as AuditBoard, SAP GRC, or ServiceNow GRC.
• Experience interfacing with external auditors and supporting detailed audit requests.
• Strong documentation, organizational, and written communication skills.

Responsibilities

• Support IT SOX and IT General Controls audits, including evidence coordination and remediation tracking.
• Execute periodic user access reviews, including AD checks and segregation of duties considerations.
• Support SAP Change Management and SAP GRC activities, including transport reviews and firefighter access reviews.
• Support SDLC controls for IT project implementations and post-implementation audits.
• Assist with third party and SaaS audit requests and audit evidence preparation.
• Administer and coordinate GRC tool access for internal teams and external auditors.
• Maintain audit-ready ITGC documentation and evidence artifacts.
• Identify opportunities for control automation and process improvement.

Skills

IT SOX controls

ITGCs

User access reviews

SAP (ERP)

GRC platforms (AuditBoard, SAP GRC, or

External auditors interaction

Documentation & reporting

Independent & collaborative work

Education

Bachelor’s degree in information technology/computer science

Tools

AuditBoard

SAP GRC

ServiceNow GRC

AD/user access tooling

Job description

Incyte Corporation seeks an IT Internal Controls Analyst to support IT SOX compliance and ITGCs across enterprise systems. You will partner with IT, IT Application Security, and Audit teams to manage control activities, access reviews, and audit evidence in a regulated environment.

The role requires hands-on SOX experience, SAP/GRC familiarity, strong documentation, and ability to collaborate with US and EU stakeholders.